last executing test programs: 15m19.874267915s ago: executing program 1 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10000, 0x102) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="170000005500e50100000000000000", @ANYRES32=0x0, @ANYBLOB="200001", @ANYRES32=0x0, @ANYBLOB="0100fe0f000002ff000000f2d2baad0812a2771e000000000000000086dd000078d5c49e72ca5fa34d3ada38633edcee00ad08a6735460323623579c2bbf4b222b0b870995a9c469ef297183ad0945ac36fe6de1aacb3e6e0d3bff455817405c925c"], 0x38}, 0x1, 0xffe}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) shutdown(r3, 0x1) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 15m18.789934521s ago: executing program 1 (id=1150): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbbw\x9bo\r\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c08d3fc140820004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 15m18.539089841s ago: executing program 1 (id=1154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 15m9.327201278s ago: executing program 1 (id=1175): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x28000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) 15m7.152378979s ago: executing program 1 (id=1179): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) dup3(r2, r0, 0x6700000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15m6.735404737s ago: executing program 1 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 14m50.986312157s ago: executing program 32 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 6.024440392s ago: executing program 0 (id=3243): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 5.62349934s ago: executing program 3 (id=3245): syz_emit_vhci(&(0x7f0000001780)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x200d}}}, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 5.414998758s ago: executing program 3 (id=3247): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x2f}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000368cb11f749dc89f7f4c2da3a6b4b2b42c43995f5d8acf0517208b8ad3efba7b9bbc515b71627ef1a5b380e6092ce3d9e6fe00b8dfd8d267ccd277c245fdf5cc6fff4bd64db2878938fa5730b8454eef5e6bd0eb89efd58836f3ff3e72021e11d2723352afdfe087eeccb5994e714f20c335d70c886e917a7ae80de702842f044c6e8449f8e83fc6d3eb3500000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000002000000850000003300000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) syz_emit_ethernet(0x46, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40601, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/185, 0xb9}, 0x40000002) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read(r3, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) setresgid(0xee00, 0xee01, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x592300, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0xd5db, 0xc, 0x9, 0xfff, 0x5c95238c, 0xa, 0x3bf, 0x802, 0x1600, 0x5, 0x20000001, 0x809, 0x400e1c8, 0x6, 0x7, 0x6, 0x199, 0x6, 0x4, 0xb, 0x402, 0x10, 0x3, 0xef, 0x0, 0xa, 0x8000003, 0xdffffffd]}) ioctl$COMEDI_SETWSUBD(r6, 0x6411) close(r2) 5.13519437s ago: executing program 4 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000a80), 0x12) sendfile(0xffffffffffffffff, r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 4.343123474s ago: executing program 0 (id=3251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.191233061s ago: executing program 2 (id=3252): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 4.184962171s ago: executing program 4 (id=3253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080)=0x2, 0x3e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cc34", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0xfffc, 0x27b6a97, @private2, 0x9}, 0x1c) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x2000, 0x400000000000005, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280020000f14010000008000fedbdf250c00450072fd45006973736d"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) process_vm_writev(0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000002d40)=""/235, 0xeb}], 0x6, &(0x7f0000000480)=[{&(0x7f0000000240)=""/35, 0x23}, {0x0}, {&(0x7f00000017c0)=""/134, 0x86}, {&(0x7f0000003040)=""/109, 0x6d}, {0x0}, {&(0x7f0000000300)=""/18, 0x12}], 0x6, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x600, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.916282783s ago: executing program 3 (id=3254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.915652812s ago: executing program 2 (id=3255): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xfffffff7}]}}]}, 0x3c}}, 0x0) 3.587145986s ago: executing program 2 (id=3256): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='_', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410328bd7000fddbdf2507000000300002"], 0x44}, 0x1, 0x0, 0x0, 0x34040814}, 0x8844) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) 3.246903291s ago: executing program 0 (id=3257): add_key$user(0x0, &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="d3c59cbe", 0x4, 0xfffffffffffffffb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, 0x0) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f000001b000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, 0x0) r5 = syz_open_pts(r0, 0x800280) dup3(r5, r0, 0x0) r6 = openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r7]) 3.003205751s ago: executing program 0 (id=3258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.431157106s ago: executing program 0 (id=3259): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYRESHEX=r3], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(r3, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0xffb}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x11b}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 2.34503727s ago: executing program 2 (id=3260): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 2.042055482s ago: executing program 3 (id=3261): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000a80), 0x12) sendfile(0xffffffffffffffff, r5, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 993.914297ms ago: executing program 2 (id=3262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x4, 0x3, "0062ba6d82f3dfffff00feffffffffffffff00"}) r3 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x3) 971.037758ms ago: executing program 3 (id=3263): sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000009}, 0x20000085) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = inotify_init() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e319588e5c96f7bb2f5261048f27a7bd4056d2fdf0878fa63ec2cc32fdb9efb974ec513da9c8ffa552cfb6451fffda7e36b1fb73bfbabfe6616710209326b6ff8549db3fe4b173a368e89727fa374045424b3dddbecbc07f8d660f83cfd622fab6bf312a460cfcd594d51a0ea993a9e582be46fc6689158f1a0cb42c57983a94415bd1bb28cafca5b4a35697ab869a401f3940ec7324e3576a3d24c00f", 0xcd}, {&(0x7f00000003c0)="d839e796be2e73f65b4fd8d6bf9d", 0xe}], 0x2}}], 0x1, 0x480e0) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) tkill(r1, 0xb) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = memfd_create(&(0x7f0000001b40)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\x05\x00\x00\x00\x00\x00\x00\x00\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x4) execveat(r4, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x1) 813.298815ms ago: executing program 4 (id=3264): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1) 703.283129ms ago: executing program 3 (id=3265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 595.177934ms ago: executing program 4 (id=3266): add_key$user(0x0, &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="d3c59cbe", 0x4, 0xfffffffffffffffb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, 0x0) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f000001b000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, 0x0) r5 = syz_open_pts(r0, 0x800280) dup3(r5, r0, 0x0) r6 = openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r7]) 287.990917ms ago: executing program 4 (id=3267): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x7fffffff}, 0x1c) shutdown(r0, 0x1) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x28}}, 0x0) 280.940577ms ago: executing program 2 (id=3268): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='_', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410328bd7000fddbdf2507000000300002"], 0x44}, 0x1, 0x0, 0x0, 0x34040814}, 0x8844) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) 83.105216ms ago: executing program 4 (id=3269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 0s ago: executing program 0 (id=3270): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) kernel console output (not intermixed with test programs): tting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.890853][T10072] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 596.916361][T10072] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 596.934213][T10072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.970088][T10072] usb 5-1: config 0 descriptor?? [ 597.412097][T10072] usbhid 5-1:0.0: can't add hid device: -71 [ 597.528343][T10072] usbhid: probe of 5-1:0.0 failed with error -71 [ 598.016395][T10072] usb 5-1: USB disconnect, device number 9 [ 600.175419][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 600.311135][T11714] loop4: detected capacity change from 0 to 32768 [ 600.356939][T11714] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 600.478845][T11714] XFS (loop4): Ending clean mount [ 600.505043][T11714] XFS (loop4): Quotacheck needed: Please wait. [ 600.592726][T11714] XFS (loop4): Quotacheck: Done. [ 600.925884][ T9890] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 602.653368][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 602.991882][T11754] input: syz0 as /devices/virtual/input/input47 [ 606.847364][T11787] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 606.892229][T11787] team0: Port device batadv1 added [ 607.203648][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 607.540309][T11778] loop4: detected capacity change from 0 to 32768 [ 607.735687][T11778] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 607.942439][T11778] XFS (loop4): Ending clean mount [ 607.972618][T11778] XFS (loop4): Quotacheck needed: Please wait. [ 608.103008][T11778] XFS (loop4): Quotacheck: Done. [ 608.383925][ T9890] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 610.907568][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 611.013396][T11829] input: syz0 as /devices/virtual/input/input48 [ 611.586409][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 615.540407][T11878] loop4: detected capacity change from 0 to 4096 [ 615.549882][T11878] EXT4-fs: Ignoring removed mblk_io_submit option [ 615.559028][T11878] EXT4-fs (loop4): Test dummy encryption mode enabled [ 615.592492][T11878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.615529][ T9890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.978466][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 618.085324][T11913] input: syz0 as /devices/virtual/input/input49 [ 618.107487][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 623.181525][T11959] input: syz1 as /devices/virtual/input/input50 [ 624.446563][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 624.495617][T11970] input: syz0 as /devices/virtual/input/input51 [ 624.789867][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.796493][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.384450][T11973] 9pnet_fd: Insufficient options for proto=fd [ 627.164384][ T5876] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 627.374669][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 627.396313][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.408556][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.419116][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.432951][ T5876] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 627.447065][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.506253][ T5876] usb 3-1: config 0 descriptor?? [ 628.051795][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 628.077128][ T5876] usbhid: probe of 3-1:0.0 failed with error -71 [ 628.093518][ T5876] usb 3-1: USB disconnect, device number 31 [ 631.753863][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 631.806339][T12045] input: syz0 as /devices/virtual/input/input52 [ 633.543354][T12058] input: syz1 as /devices/virtual/input/input53 [ 633.621609][T12058] binder: BINDER_SET_CONTEXT_MGR already set [ 633.634322][T12058] binder: 12055:12058 ioctl 4018620d 200000000040 returned -16 [ 641.856635][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 642.056412][T12110] input: syz0 as /devices/virtual/input/input54 [ 642.930730][T12119] gretap0: entered promiscuous mode [ 643.153235][T12125] input: syz1 as /devices/virtual/input/input55 [ 646.906657][T12154] loop2: detected capacity change from 0 to 512 [ 647.626115][T12154] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 647.654194][T12154] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 647.703860][T12154] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 648.376833][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 648.398891][T12167] input: syz0 as /devices/virtual/input/input56 [ 652.096589][T12196] fuse: Unknown parameter 'user_id00000000000000000000' [ 656.535350][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 656.611674][T12231] input: syz0 as /devices/virtual/input/input57 [ 656.943875][T12232] fuse: Bad value for 'fd' [ 658.101035][T12239] fuse: Bad value for 'fd' [ 658.377149][T12243] input: syz1 as /devices/virtual/input/input58 [ 658.776518][ T786] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 658.964489][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 658.985656][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.003738][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.014153][ T786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.027890][ T786] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 659.066588][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.098947][ T786] usb 5-1: config 0 descriptor?? [ 659.566444][ T786] usbhid 5-1:0.0: can't add hid device: -71 [ 659.572595][ T786] usbhid: probe of 5-1:0.0 failed with error -71 [ 659.610817][ T786] usb 5-1: USB disconnect, device number 10 [ 661.919380][T12274] fuse: Bad value for 'fd' [ 662.015890][T12260] loop2: detected capacity change from 0 to 32768 [ 662.306108][T12260] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 662.684713][T12260] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop2": -EINTR [ 662.704375][T12260] XFS (loop2): log mount failed [ 663.065314][T12284] input: syz1 as /devices/virtual/input/input59 [ 665.365200][ T786] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 665.684400][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 665.706417][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.717677][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.727630][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 665.741117][ T786] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 665.750823][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.857989][ T786] usb 3-1: config 0 descriptor?? [ 666.231202][T12309] fuse: Bad value for 'fd' [ 666.304415][ T786] usbhid 3-1:0.0: can't add hid device: -71 [ 666.312669][ T786] usbhid: probe of 3-1:0.0 failed with error -71 [ 666.347925][ T786] usb 3-1: USB disconnect, device number 32 [ 666.524517][T12311] input: syz1 as /devices/virtual/input/input60 [ 666.613725][ C0] vcan0: j1939_tp_txtimer: 0xffff88805e392000: tx aborted with unknown reason: -2 [ 667.123084][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e392000: abort rx timeout. Force session deactivation [ 667.863689][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f2acc00: rx timeout, send abort [ 668.372084][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f2acc00: abort rx timeout. Force session deactivation [ 668.861109][T12336] fuse: Unknown parameter '0x0000000000000004' [ 668.936382][T12335] input: syz1 as /devices/virtual/input/input61 [ 669.404429][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 669.757180][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 669.765215][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.788366][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.799000][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.824852][ T8] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 670.566333][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.622441][ T8] usb 3-1: config 0 descriptor?? [ 671.196992][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 671.275944][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 671.874473][ T8] usb 3-1: USB disconnect, device number 33 [ 672.221446][T12364] fuse: Unknown parameter '0x0000000000000004' [ 672.506054][T12366] input: syz1 as /devices/virtual/input/input62 [ 675.524289][ T5866] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 675.544799][T12404] fuse: Unknown parameter '0x0000000000000004' [ 676.138266][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.284326][ T5866] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 676.293557][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.342832][ T5866] usb 3-1: config 0 descriptor?? [ 676.591244][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 676.609468][ T5866] usbhid: probe of 3-1:0.0 failed with error -71 [ 676.637540][ T5866] usb 3-1: USB disconnect, device number 34 [ 677.214375][ T5866] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 677.406125][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 678.186891][ T5866] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 678.203868][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.224658][ T5866] usb 3-1: config 0 descriptor?? [ 678.444418][ T5866] usb 3-1: can't set config #0, error -71 [ 678.488470][ T5866] usb 3-1: USB disconnect, device number 35 [ 679.817339][T12440] fuse: Unknown parameter '0x0000000000000004' [ 686.228144][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.244317][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.354581][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 698.412343][T12586] input: syz0 as /devices/virtual/input/input64 [ 704.674227][T12646] fuse: Bad value for 'fd' [ 704.772974][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 704.960944][T12647] input: syz0 as /devices/virtual/input/input65 [ 709.395183][T12686] 9pnet_fd: Insufficient options for proto=fd [ 709.592352][T12677] fuse: Bad value for 'fd' [ 710.275798][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 710.308972][T12696] input: syz0 as /devices/virtual/input/input66 [ 713.132872][T12722] fuse: Bad value for 'fd' [ 714.321005][T12724] 9pnet_fd: Insufficient options for proto=fd [ 714.380036][T12710] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.387854][T12710] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.934269][T12730] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 715.127136][T12730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.144221][T12730] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 715.153361][T12730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.193279][T12730] usb 4-1: config 0 descriptor?? [ 715.416516][T12730] usbhid 4-1:0.0: can't add hid device: -71 [ 715.424447][T12730] usbhid: probe of 4-1:0.0 failed with error -71 [ 715.454620][T12730] usb 4-1: USB disconnect, device number 27 [ 715.496388][T12710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.558375][T12710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.027882][T12730] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 716.191624][T12710] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.204363][T12710] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.214664][T12710] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.223735][T12710] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.285646][T12730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 716.326558][T12730] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 716.352094][T12730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.363872][T12730] usb 4-1: config 0 descriptor?? [ 716.390488][T12730] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 716.604968][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.612393][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.619791][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.627254][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.634815][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.642430][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.649856][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.657506][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.665088][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.672489][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.677437][ T5142] usb 4-1: control msg error: -71 [ 716.679841][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.692760][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.700257][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.707587][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 716.732389][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.740185][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.747566][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.754986][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.762081][ T5142] usb 4-1: control msg error: -71 [ 716.762823][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.774385][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 716.796488][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.804703][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.812289][T12730] usb 4-1: USB disconnect, device number 28 [ 716.818337][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 716.818362][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19 [ 716.830464][ T5142] usb 4-1: control msg error: -71 [ 718.591755][T12769] 9pnet_fd: Insufficient options for proto=fd [ 723.429489][T12817] 9pnet_fd: Insufficient options for proto=fd [ 727.016985][T12859] 9pnet_fd: Insufficient options for proto=fd [ 731.355835][T12906] loop4: detected capacity change from 0 to 128 [ 731.428686][T12901] 9pnet_fd: Insufficient options for proto=fd [ 735.324261][ T787] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 735.616491][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.646104][ T787] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 735.671727][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.699052][ T787] usb 1-1: config 0 descriptor?? [ 735.965462][ T787] usbhid 1-1:0.0: can't add hid device: -71 [ 735.971552][ T787] usbhid: probe of 1-1:0.0 failed with error -71 [ 736.014379][ T787] usb 1-1: USB disconnect, device number 62 [ 736.315147][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 738.417606][T12972] loop0: detected capacity change from 0 to 131072 [ 738.435418][T12972] F2FS-fs (loop0): invalid crc value [ 738.519871][T12972] F2FS-fs (loop0): Found nat_bits in checkpoint [ 738.624386][T12986] loop3: detected capacity change from 0 to 164 [ 738.624508][T12972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 739.681915][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'. [ 744.853167][T13043] befs: (nullb0): invalid magic header [ 745.504324][ T28] audit: type=1800 audit(1764206522.622:2366): pid=13043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1949" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 745.754859][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 746.365437][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1954'. [ 747.669739][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.676480][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.226397][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 749.145033][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 749.226253][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.309877][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.879421][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 750.279019][ T8] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 750.289048][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.300415][ T8] usb 5-1: config 0 descriptor?? [ 750.989067][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.000703][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.009324][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.019799][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.027908][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.068318][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.103931][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.164398][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.186024][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.208925][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.221423][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.279324][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.360616][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.452084][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.477137][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 751.486373][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.493826][ T8] hid-generic 0003:0457:07DA.0009: unknown main item tag 0x0 [ 751.568522][ T8] hid-generic 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 751.618002][T13098] input: syz1 as /devices/virtual/input/input68 [ 751.645579][ T8] usb 5-1: USB disconnect, device number 11 [ 751.866912][T13099] fido_id[13099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 752.462393][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 754.500217][T13121] loop3: detected capacity change from 0 to 256 [ 754.507646][T13121] exfat: Deprecated parameter 'utf8' [ 754.513036][T13121] exfat: Unknown parameter 'zero_size_dir' [ 754.535465][ T23] IPVS: starting estimator thread 0... [ 754.635326][ T28] audit: type=1326 audit(1764206532.452:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1435b8f749 code=0x0 [ 754.636638][T13124] IPVS: using max 17 ests per chain, 40800 per kthread [ 755.344483][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 755.418743][T13134] input: syz1 as /devices/virtual/input/input69 [ 755.548645][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 755.576417][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.599996][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.658349][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 755.698935][ T8] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 755.708464][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.883496][ T8] usb 4-1: config 0 descriptor?? [ 756.306007][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.330687][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.351407][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.370437][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.463065][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.606633][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.614552][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.622009][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.629730][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.637380][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.652151][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.668428][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.685578][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.693298][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.724650][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 756.732135][ T8] hid-generic 0003:0457:07DA.000A: unknown main item tag 0x0 [ 757.801865][ T8] hid-generic 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 757.897374][ T8] usb 4-1: USB disconnect, device number 29 [ 758.141653][T13152] fido_id[13152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 758.702215][ T8] IPVS: starting estimator thread 0... [ 758.896373][T13156] loop2: detected capacity change from 0 to 256 [ 758.903463][T13156] exfat: Deprecated parameter 'utf8' [ 758.908934][T13156] exfat: Unknown parameter 'zero_size_dir' [ 758.956565][T13161] IPVS: using max 22 ests per chain, 52800 per kthread [ 758.969232][T10999] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 759.531721][T13173] input: syz1 as /devices/virtual/input/input70 [ 759.581322][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1986'. [ 760.397360][T13181] loop4: detected capacity change from 0 to 16 [ 760.432078][T13181] erofs: (device loop4): mounted with root inode @ nid 36. [ 763.659832][T13203] input: syz1 as /devices/virtual/input/input71 [ 766.911762][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2001'. [ 767.227762][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 767.280713][T13237] input: syz0 as /devices/virtual/input/input72 [ 768.912847][T13250] input: syz1 as /devices/virtual/input/input73 [ 770.875469][T13257] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2009'. [ 772.928057][T13288] input: syz1 as /devices/virtual/input/input74 [ 773.867733][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 774.155944][T13302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2017'. [ 774.175845][T13297] input: syz0 as /devices/virtual/input/input75 [ 774.413598][T13305] loop3: detected capacity change from 0 to 4096 [ 774.458891][T13305] EXT4-fs: Ignoring removed mblk_io_submit option [ 774.514999][T13305] EXT4-fs (loop3): Test dummy encryption mode enabled [ 774.538344][T13305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.996675][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.442913][T13310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2022'. [ 776.551305][T13330] loop2: detected capacity change from 0 to 1024 [ 776.828957][T11581] hfsplus: b-tree write err: -5, ino 4 [ 778.379799][T13354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2033'. [ 779.724567][T13361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2036'. [ 780.176383][T13368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2037'. [ 782.254002][T13379] loop2: detected capacity change from 0 to 256 [ 782.376688][ T28] audit: type=1326 audit(1764206560.192:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf998f749 code=0x7ffc0000 [ 782.472644][ T28] audit: type=1326 audit(1764206560.192:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf998f749 code=0x7ffc0000 [ 782.556702][ T28] audit: type=1326 audit(1764206560.192:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fdbf998f749 code=0x7ffc0000 [ 782.624430][ T28] audit: type=1326 audit(1764206560.192:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf998f749 code=0x7ffc0000 [ 782.766461][ T28] audit: type=1326 audit(1764206560.192:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.3.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf998f749 code=0x7ffc0000 [ 784.931185][T13418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2051'. [ 789.151729][T13449] loop3: detected capacity change from 0 to 40427 [ 789.177044][T13449] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 789.200794][T13449] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 789.245590][T13449] F2FS-fs (loop3): Found nat_bits in checkpoint [ 789.498525][T13449] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 789.524372][T13449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 789.615852][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.644368][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.652016][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.674356][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.682161][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.701609][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.721436][T13449] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 791.907267][T13481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2071'. [ 793.487425][T13507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2073'. [ 798.950062][T13557] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 798.974448][T13557] team0: Port device batadv2 added [ 799.013603][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2090'. [ 799.169872][T13559] hub 9-0:1.0: USB hub found [ 799.188089][T13559] hub 9-0:1.0: 1 port detected [ 803.415100][T13585] loop4: detected capacity change from 0 to 16 [ 803.425973][T13585] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 805.577998][T13592] loop4: detected capacity change from 0 to 131072 [ 805.635116][T13592] F2FS-fs (loop4): invalid crc value [ 805.665813][T13592] F2FS-fs (loop4): Found nat_bits in checkpoint [ 805.719206][T13592] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 809.219616][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.234267][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.532016][T13641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'. [ 819.514309][T13706] xt_connbytes: Forcing CT accounting to be enabled [ 821.900637][T13724] loop4: detected capacity change from 0 to 131072 [ 821.922602][T13724] F2FS-fs (loop4): invalid crc value [ 821.987115][T13724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 822.039041][T13724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 822.920446][T13735] loop3: detected capacity change from 0 to 256 [ 823.079094][ T28] audit: type=1804 audit(1764206600.882:2373): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2133" name="/newroot/528/file0/bus" dev="loop3" ino=1048599 res=1 errno=0 [ 826.768117][T13762] loop2: detected capacity change from 0 to 256 [ 834.383829][T13817] loop3: detected capacity change from 0 to 131072 [ 834.436681][T13817] F2FS-fs (loop3): invalid crc value [ 834.533564][T13817] F2FS-fs (loop3): Found nat_bits in checkpoint [ 834.586983][T13817] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 841.196676][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 842.968941][T13893] loop4: detected capacity change from 0 to 256 [ 844.040381][T13897] loop3: detected capacity change from 0 to 2048 [ 848.006500][T13923] loop0: detected capacity change from 0 to 131072 [ 848.021220][T13923] F2FS-fs (loop0): invalid crc value [ 848.055225][T13926] loop2: detected capacity change from 0 to 256 [ 848.084618][T13923] F2FS-fs (loop0): Found nat_bits in checkpoint [ 848.156548][T13923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 848.678623][T13939] netlink: 'syz.3.2181': attribute type 16 has an invalid length. [ 848.968172][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 855.438783][T13985] loop0: detected capacity change from 0 to 1024 [ 855.981046][T13985] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 856.049798][T13985] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 856.095205][T13985] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2194: Failed to acquire dquot type 0 [ 856.166621][T13985] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 856.205876][T13991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2195'. [ 856.215330][T13985] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #13: comm syz.0.2194: corrupted inode contents [ 856.255713][T13985] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #13: comm syz.0.2194: mark_inode_dirty error [ 856.269351][T13985] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #13: comm syz.0.2194: corrupted inode contents [ 856.284182][T13985] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.2194: mark_inode_dirty error [ 856.306000][T13985] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #13: comm syz.0.2194: corrupted inode contents [ 856.384935][T13985] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 856.428856][T13985] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #13: comm syz.0.2194: corrupted inode contents [ 856.458629][T13985] EXT4-fs error (device loop0): ext4_truncate:4294: inode #13: comm syz.0.2194: mark_inode_dirty error [ 856.488372][T13985] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 856.516153][T13985] EXT4-fs (loop0): 1 truncate cleaned up [ 856.527411][T13985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.929569][T13999] xt_TCPMSS: Only works on TCP SYN packets [ 857.587387][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.361277][T14019] loop2: detected capacity change from 0 to 131072 [ 861.141388][T14019] F2FS-fs (loop2): invalid crc value [ 861.156773][T14019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 861.843480][T14019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 865.094191][T12725] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 866.936457][T12725] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 866.964141][T12725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.995294][T12725] usb 5-1: config 0 descriptor?? [ 867.007264][T12725] cp210x 5-1:0.0: cp210x converter detected [ 867.036772][T14079] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 867.064340][T14079] overlayfs: missing 'lowerdir' [ 867.934440][T12725] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 867.956669][T12725] usb 5-1: cp210x converter now attached to ttyUSB0 [ 868.154305][ T8] usb 5-1: USB disconnect, device number 12 [ 868.176815][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 868.219863][ T8] cp210x 5-1:0.0: device disconnected [ 868.456597][T14090] loop3: detected capacity change from 0 to 1024 [ 868.554836][T14090] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 868.604962][T14090] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 868.605082][T14088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2208'. [ 868.623741][T14090] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2219: Failed to acquire dquot type 0 [ 868.654801][T14090] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 868.675239][T14090] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #13: comm syz.3.2219: corrupted inode contents [ 868.691591][T14090] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #13: comm syz.3.2219: mark_inode_dirty error [ 868.712540][T14090] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #13: comm syz.3.2219: corrupted inode contents [ 868.765736][T14090] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.2219: mark_inode_dirty error [ 868.809284][T14090] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #13: comm syz.3.2219: corrupted inode contents [ 868.842096][T14090] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 868.997195][T14090] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #13: comm syz.3.2219: corrupted inode contents [ 869.011520][T14090] EXT4-fs error (device loop3): ext4_truncate:4294: inode #13: comm syz.3.2219: mark_inode_dirty error [ 869.799119][T14090] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 869.882915][T14090] EXT4-fs (loop3): 1 truncate cleaned up [ 869.897888][T14090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.917124][T14104] loop4: detected capacity change from 0 to 256 [ 869.938886][T14101] sit1: entered allmulticast mode [ 870.167630][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.225980][T14106] loop2: detected capacity change from 0 to 2048 [ 870.304918][T14106] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 870.310233][T14106] loop2: partition table partially beyond EOD, truncated [ 870.970956][T14106] loop2: p1 start 4278190080 is beyond EOD, truncated [ 871.112592][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.124818][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.435098][T14106] loop2: p2 start 16908800 is beyond EOD, truncated [ 871.470531][T14106] loop2: p4 start 11326 is beyond EOD, truncated [ 871.584181][T14106] loop2: p5 start 16908800 is beyond EOD, truncated [ 871.633075][T14106] loop2: p6 start 11326 is beyond EOD, truncated [ 871.752262][ T5157] loop2: p1 < > p2 p3 < p5 p6 > p4 [ 872.013113][ T5157] loop2: partition table partially beyond EOD, truncated [ 872.081628][ T5157] loop2: p1 start 4278190080 is beyond EOD, truncated [ 872.164278][ T5157] loop2: p2 start 16908800 is beyond EOD, truncated [ 872.237692][ T5157] loop2: p4 start 11326 is beyond EOD, truncated [ 872.261255][ T5157] loop2: p5 start 16908800 is beyond EOD, truncated [ 872.268085][ T5157] loop2: p6 start 11326 is beyond EOD, truncated [ 872.621540][T10999] udevd[10999]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 873.636224][T14139] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2231'. [ 873.725360][T14145] loop3: detected capacity change from 0 to 256 [ 874.446240][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 876.733966][T14168] loop4: detected capacity change from 0 to 2048 [ 877.560849][T14176] loop3: detected capacity change from 0 to 256 [ 881.921007][T14215] loop2: detected capacity change from 0 to 2048 [ 882.798132][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 882.826880][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 891.153899][T14295] loop4: detected capacity change from 0 to 64 [ 894.350108][T14323] input: syz0 as /devices/virtual/input/input79 [ 899.634718][ T27] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 899.755345][T14352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 899.781250][T14352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 899.789954][T14352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 899.804427][T14352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 899.813834][T14352] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 899.821508][T14352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 899.854719][T10316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 899.866024][T10316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 899.873720][T10316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 899.893744][T10316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 899.905569][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.916222][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 899.930672][T10316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 899.939313][T10316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 899.946814][ T27] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 899.956726][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.022056][ T27] usb 4-1: config 0 descriptor?? [ 900.125236][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 900.630911][T12730] usb 4-1: USB disconnect, device number 30 [ 901.234562][T12730] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 901.483485][T12730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.510289][T12730] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 901.524590][T12730] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 901.533864][T12730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.620934][T12730] usb 4-1: config 0 descriptor?? [ 901.665731][T12730] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 901.673375][T12730] pegasus_notetaker: probe of 4-1:0.0 failed with error -22 [ 901.689551][T12730] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 901.852755][ T5867] usb 4-1: USB disconnect, device number 31 [ 901.966670][T14350] chnl_net:caif_netlink_parms(): no params data found [ 902.077525][T10316] Bluetooth: hci0: command tx timeout [ 902.457173][T14380] input: syz0 as /devices/virtual/input/input80 [ 902.746211][T14383] 9pnet_fd: Insufficient options for proto=fd [ 903.140338][T14350] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.172467][T14350] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.196211][T14350] bridge_slave_0: entered allmulticast mode [ 903.239135][T14350] bridge_slave_0: entered promiscuous mode [ 903.427331][T14396] syz.3.2301 uses obsolete (PF_INET,SOCK_PACKET) [ 903.940354][T14350] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.973623][T14350] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.160961][T14394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.172120][T14350] bridge_slave_1: entered allmulticast mode [ 904.180283][T14350] bridge_slave_1: entered promiscuous mode [ 905.570374][T14350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.622783][T14350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.836672][T14350] team0: Port device team_slave_0 added [ 905.864339][T14350] team0: Port device team_slave_1 added [ 906.645721][T14415] loop4: detected capacity change from 0 to 131072 [ 906.668464][T14415] F2FS-fs (loop4): invalid crc value [ 906.723817][T14415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 906.803605][T14415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 907.236981][T14350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.274132][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.321646][T14350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.508107][T14350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.584167][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.719460][T14350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.717011][T14350] hsr_slave_0: entered promiscuous mode [ 908.745309][T14350] hsr_slave_1: entered promiscuous mode [ 908.886674][T11579] hsr_slave_0: left promiscuous mode [ 908.926785][T11579] hsr_slave_1: left promiscuous mode [ 908.945923][T11579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.955799][T12730] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 908.976628][T11579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.005072][T11579] bridge_slave_1: left allmulticast mode [ 909.011078][T11579] bridge_slave_1: left promiscuous mode [ 909.018841][T11579] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.048082][T11579] bridge_slave_0: left allmulticast mode [ 909.053811][T11579] bridge_slave_0: left promiscuous mode [ 909.062167][T11579] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.140338][T11579] team0 (unregistering): Port device batadv2 removed [ 909.150100][T12730] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 909.160336][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.191949][T12730] usb 1-1: config 0 descriptor?? [ 909.217335][T12730] cp210x 1-1:0.0: cp210x converter detected [ 909.257641][T11579] team0 (unregistering): Port device batadv1 removed [ 909.618510][T12730] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 909.634981][T12730] usb 1-1: cp210x converter now attached to ttyUSB0 [ 909.833631][T12730] usb 1-1: USB disconnect, device number 63 [ 909.861230][T12730] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 909.941132][T12730] cp210x 1-1:0.0: device disconnected [ 910.228553][T14440] 9pnet_fd: Insufficient options for proto=fd [ 911.691940][T14445] loop4: detected capacity change from 0 to 512 [ 911.936259][T14445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.994310][T14445] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.306928][T11579] team0 (unregistering): Port device team_slave_1 removed [ 913.589279][T11579] team0 (unregistering): Port device team_slave_0 removed [ 913.695601][T11579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.883913][T11579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.875907][ T9890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.414381][ T787] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 920.583775][T11579] bond0 (unregistering): Released all slaves [ 920.644369][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 920.651916][ T787] usb 4-1: config 3 has an invalid interface number: 199 but max is 0 [ 920.660933][ T787] usb 4-1: config 3 has no interface number 0 [ 920.667616][ T787] usb 4-1: config 3 interface 199 has no altsetting 0 [ 920.683828][ T787] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=68.9e [ 920.704472][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.712544][ T787] usb 4-1: Product: syz [ 920.724124][ T787] usb 4-1: Manufacturer: syz [ 920.728818][ T787] usb 4-1: SerialNumber: syz [ 920.769898][ T787] usb 4-1: bad CDC descriptors [ 921.075724][ T787] usb 4-1: USB disconnect, device number 32 [ 921.277508][T14504] befs: (nullb0): invalid magic header [ 922.055179][T14510] loop4: detected capacity change from 0 to 2048 [ 924.659678][T11579] IPVS: stop unused estimator thread 0... [ 926.530474][T14537] loop4: detected capacity change from 0 to 128 [ 926.596959][T14350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 926.640508][T14350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 926.683182][T14350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 926.723683][T14350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 926.824421][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 927.199846][T14350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.326538][T14350] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.395070][T14350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 927.406328][T14350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 927.445989][T11558] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.453191][T11558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.494529][T11558] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.501740][T11558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.864288][T14568] loop4: detected capacity change from 0 to 2048 [ 928.808954][T14350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.812152][T14350] veth0_vlan: entered promiscuous mode [ 929.912377][T14350] veth1_vlan: entered promiscuous mode [ 930.336318][T14350] veth0_macvtap: entered promiscuous mode [ 931.688822][T14350] veth1_macvtap: entered promiscuous mode [ 931.990724][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.998444][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.056947][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.084116][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.104184][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.129832][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.154145][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.174057][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.250171][T14350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.332214][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.390723][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.412020][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.423012][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.444254][T14350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.473593][T14350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.481599][T14608] loop4: detected capacity change from 0 to 2048 [ 932.525493][T14350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.601306][T14350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.630697][T14350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.664310][T14350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.673154][T14350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.059201][T11581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.085688][T11581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.741334][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.765689][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.007966][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2288'. [ 935.581976][T14633] Process accounting resumed [ 936.481207][T14639] loop4: detected capacity change from 0 to 131072 [ 936.515318][T14639] F2FS-fs (loop4): invalid crc value [ 936.532834][T14639] F2FS-fs (loop4): Found nat_bits in checkpoint [ 936.592317][T14639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 941.093117][T14700] loop3: detected capacity change from 0 to 128 [ 941.157794][T14700] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 946.154371][ T8] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 946.354176][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 946.391040][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 946.421212][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.444469][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.455827][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 946.474644][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.504085][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 946.523465][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.885806][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 946.892588][ T8] usbtmc 1-1:16.0: can't read capabilities [ 947.054311][T12730] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 947.187220][ T8] usb 1-1: USB disconnect, device number 64 [ 947.193861][T14761] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 947.215468][T14767] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 947.264515][T12730] usb 3-1: Using ep0 maxpacket: 32 [ 947.279762][T12730] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 947.304166][T12730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.321865][T12730] usb 3-1: Product: syz [ 947.331948][T12730] usb 3-1: Manufacturer: syz [ 947.347164][T12730] usb 3-1: SerialNumber: syz [ 947.449698][T12730] usb 3-1: config 0 descriptor?? [ 948.090076][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.163868][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.976376][T12730] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 949.505557][T12730] peak_usb: probe of 3-1:0.0 failed with error -71 [ 949.517386][T12730] usb 3-1: USB disconnect, device number 36 [ 949.673891][T14784] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2385'. [ 950.167434][T14796] netlink: 2792 bytes leftover after parsing attributes in process `syz.0.2387'. [ 951.362365][T14808] befs: (nullb0): invalid magic header [ 952.495696][T14823] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2396'. [ 953.011526][T14827] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2397'. [ 955.504418][T14849] loop3: detected capacity change from 0 to 1024 [ 955.764188][T12728] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 956.004348][T12728] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 956.319772][T12728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.566510][T11569] hfsplus: b-tree write err: -5, ino 4 [ 956.613349][T12728] usb 3-1: config 0 descriptor?? [ 956.626439][T12728] cp210x 3-1:0.0: cp210x converter detected [ 956.961145][ T5788] syz-executor (5788) used greatest stack depth: 20168 bytes left [ 956.987885][T14352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 957.000552][T14352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 957.010566][T14352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 957.022111][T14352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 957.033683][T14352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 957.041937][T14352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 957.071275][T14865] tmpfs: Bad value for 'huge' [ 957.791637][T12728] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 957.819826][T12728] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 958.005030][T12728] usb 3-1: cp210x converter now attached to ttyUSB0 [ 958.032015][T12728] usb 3-1: USB disconnect, device number 37 [ 958.084960][T12728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 958.113918][T12728] cp210x 3-1:0.0: device disconnected [ 958.340397][T14870] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 958.431261][T14859] chnl_net:caif_netlink_parms(): no params data found [ 958.562066][T14859] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.570950][T14859] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.578458][T14859] bridge_slave_0: entered allmulticast mode [ 958.587713][T14859] bridge_slave_0: entered promiscuous mode [ 958.609099][T14859] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.627063][T14859] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.647050][T14859] bridge_slave_1: entered allmulticast mode [ 958.669115][T14859] bridge_slave_1: entered promiscuous mode [ 958.775260][T14859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.895675][T14859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.227658][T14352] Bluetooth: hci1: command tx timeout [ 959.661582][T14859] team0: Port device team_slave_0 added [ 959.920378][T14859] team0: Port device team_slave_1 added [ 959.986252][T14859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.013116][T14859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.084577][T14885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2412'. [ 960.098809][T14859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.112912][T14859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.120027][T14859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.154517][T14859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.217468][T14859] hsr_slave_0: entered promiscuous mode [ 960.225844][T14859] hsr_slave_1: entered promiscuous mode [ 960.234258][T14859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.262863][T14859] Cannot create hsr debugfs directory [ 961.265059][T14352] Bluetooth: hci1: command tx timeout [ 961.332717][T14859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.543272][T14859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.670761][T14859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.830624][T14859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.228683][T14859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 962.263225][T14859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 962.285579][T14859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 962.301632][T14859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.544944][T14915] tmpfs: Bad value for 'huge' [ 962.560666][T14859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.638313][T14352] Bluetooth: hci1: command tx timeout [ 963.769698][T14859] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.824573][T11551] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.833253][T11551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.046891][T14859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 964.074469][T14859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.102808][T11551] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.110085][T11551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.198358][T14859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.287298][T14934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2422'. [ 965.401385][T14859] veth0_vlan: entered promiscuous mode [ 965.464582][T14859] veth1_vlan: entered promiscuous mode [ 965.516412][T14859] veth0_macvtap: entered promiscuous mode [ 965.584332][T14859] veth1_macvtap: entered promiscuous mode [ 965.611730][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.623149][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.635547][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.647004][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.659043][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.670028][T14352] Bluetooth: hci1: command tx timeout [ 965.676240][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.686767][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.698238][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.710837][T14859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.731231][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.763969][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.792651][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.813942][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.834298][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.859367][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.877346][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 965.917507][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.949763][T14859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.990629][T14859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.014554][T14859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.042567][T14859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.071444][T14859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.122947][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.146973][T14954] tmpfs: Bad value for 'huge' [ 967.306623][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.674362][T14957] befs: (nullb0): invalid magic header [ 968.010205][T11547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.068877][T11547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.333135][T14973] netlink: 2792 bytes leftover after parsing attributes in process `syz.4.2432'. [ 971.472054][T14989] tmpfs: Unknown parameter 'n' [ 972.644349][ T5623] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 972.748323][T15005] netlink: 2792 bytes leftover after parsing attributes in process `syz.2.2443'. [ 972.995873][ T5623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.136300][ T5623] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 973.256458][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.376748][ T5623] usb 5-1: config 0 descriptor?? [ 973.638436][ T5623] usbhid 5-1:0.0: can't add hid device: -71 [ 973.671917][ T5623] usbhid: probe of 5-1:0.0 failed with error -71 [ 973.724961][ T5623] usb 5-1: USB disconnect, device number 13 [ 973.922006][T15009] ip6erspan0: entered promiscuous mode [ 974.927996][T10316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 974.944226][T10316] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 974.976151][T10316] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 975.000667][T10316] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 975.008829][T10316] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 975.016680][T10316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 975.797024][T11555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.980344][T11555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.216679][T11555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.338457][T15027] tmpfs: Unknown parameter 'n' [ 976.681910][T11555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.091748][T15031] loop4: detected capacity change from 0 to 64 [ 977.106790][T10316] Bluetooth: hci2: command tx timeout [ 977.381665][T15018] chnl_net:caif_netlink_parms(): no params data found [ 977.468987][T15042] loop4: detected capacity change from 0 to 128 [ 977.776819][T15042] bio_check_eod: 2 callbacks suppressed [ 977.776839][T15042] syz.4.2452: attempt to access beyond end of device [ 977.776839][T15042] loop4: rw=2049, sector=185, nr_sectors = 856 limit=128 [ 977.864640][ T5623] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 978.079525][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.131940][ T5623] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 978.168053][T11551] kworker/u4:11: attempt to access beyond end of device [ 978.168053][T11551] loop4: rw=1, sector=145, nr_sectors = 40 limit=128 [ 978.190520][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.253553][ T5623] usb 1-1: config 0 descriptor?? [ 978.424611][T15018] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.474230][T15018] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.481585][T15018] bridge_slave_0: entered allmulticast mode [ 978.520080][ T5623] usbhid 1-1:0.0: can't add hid device: -71 [ 978.528659][ T5623] usbhid: probe of 1-1:0.0 failed with error -71 [ 978.587457][T15018] bridge_slave_0: entered promiscuous mode [ 978.596730][T15062] tmpfs: Unknown parameter 'n' [ 978.603961][ T5623] usb 1-1: USB disconnect, device number 65 [ 978.619196][T15018] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.626585][T15018] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.634753][T15018] bridge_slave_1: entered allmulticast mode [ 978.642347][T15018] bridge_slave_1: entered promiscuous mode [ 979.240952][T10316] Bluetooth: hci2: command tx timeout [ 979.570650][T15018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.701018][T15018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.979138][T15018] team0: Port device team_slave_0 added [ 979.997706][T15018] team0: Port device team_slave_1 added [ 980.114432][T15018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.121462][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.162684][T15018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.231883][T15018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.266070][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.315828][T15018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.291019][T15018] hsr_slave_0: entered promiscuous mode [ 981.305334][T15018] hsr_slave_1: entered promiscuous mode [ 981.322321][T15018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.356508][T10316] Bluetooth: hci2: command tx timeout [ 981.379665][T15018] Cannot create hsr debugfs directory [ 981.548341][T15097] netlink: 2792 bytes leftover after parsing attributes in process `syz.2.2462'. [ 982.134764][T15110] tmpfs: Unknown parameter 'nr_blo' [ 982.578419][T11555] hsr_slave_0: left promiscuous mode [ 982.603394][T11555] hsr_slave_1: left promiscuous mode [ 982.617158][T11555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.652363][T11555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.667577][T11555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.676038][T11555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.707283][T11555] bridge_slave_1: left allmulticast mode [ 982.713717][T11555] bridge_slave_1: left promiscuous mode [ 982.728413][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.767722][T11555] bridge_slave_0: left allmulticast mode [ 982.776191][T11555] bridge_slave_0: left promiscuous mode [ 982.795808][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.860141][T11555] veth1_macvtap: left promiscuous mode [ 982.867758][T11555] veth0_macvtap: left promiscuous mode [ 983.424159][T10316] Bluetooth: hci2: command tx timeout [ 984.029386][T15121] Process accounting resumed [ 984.694346][ T27] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 984.908048][ T27] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.927872][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.951181][ T27] usb 3-1: config 0 descriptor?? [ 984.978192][ T27] cp210x 3-1:0.0: cp210x converter detected [ 985.172181][ T27] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 985.199243][ T27] cp210x 3-1:0.0: querying part number failed [ 985.236207][ T27] usb 3-1: cp210x converter now attached to ttyUSB0 [ 986.546784][T11555] team0 (unregistering): Port device team_slave_1 removed [ 986.676052][T11555] team0 (unregistering): Port device team_slave_0 removed [ 986.770248][T11555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.389413][T12728] usb 3-1: USB disconnect, device number 38 [ 987.412542][T12728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 987.437727][T12728] cp210x 3-1:0.0: device disconnected [ 987.540402][T15147] tmpfs: Unknown parameter 'nr_blo' [ 988.696965][T11555] bond0 (unregistering): Released all slaves [ 989.546598][T15155] loop2: detected capacity change from 0 to 131072 [ 989.618039][T15155] F2FS-fs (loop2): invalid crc value [ 989.671906][T15155] F2FS-fs (loop2): Found nat_bits in checkpoint [ 989.767844][T15155] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 990.146497][T15168] loop4: detected capacity change from 0 to 1024 [ 990.378485][T15168] hfsplus: can't free extent [ 990.612551][T15167] hfsplus: can't free extent [ 990.621495][T15167] hfsplus: can't free extent [ 991.042983][T11555] IPVS: stop unused estimator thread 0... [ 991.191379][T15018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 991.239907][T15018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 991.261987][T15018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 991.311464][T15018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 991.917683][T15018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.999012][T15196] tmpfs: Unknown parameter 'nr_blo' [ 992.752447][T15018] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.826112][T11569] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.833289][T11569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.153218][T11569] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.160524][T11569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.432970][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.439905][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.921506][T15018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.220048][T15018] veth0_vlan: entered promiscuous mode [ 994.331021][T15018] veth1_vlan: entered promiscuous mode [ 994.689050][T15018] veth0_macvtap: entered promiscuous mode [ 994.823418][T15018] veth1_macvtap: entered promiscuous mode [ 995.008321][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.080228][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.131488][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.443764][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.454075][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.682652][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.720501][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.770226][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.889267][T15018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.040768][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.082035][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.118290][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.160344][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.204154][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.271032][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.321549][T15018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.379037][T15018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.477022][T15018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.551469][T15018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.591181][T15018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.634297][T15018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.655899][T15018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.004330][T11579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.059180][T11579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.213666][T11569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.252107][T11569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.057256][T15277] loop4: detected capacity change from 0 to 1024 [ 1000.296777][T15277] hfsplus: can't free extent [ 1000.871463][T15265] befs: (nullb0): invalid magic header [ 1001.004511][ T5623] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1001.234916][ T5623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.284235][ T5623] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1001.314446][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.399468][ T5623] usb 5-1: config 0 descriptor?? [ 1001.413541][T15292] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2503'. [ 1001.633537][ T5623] usbhid 5-1:0.0: can't add hid device: -71 [ 1001.650419][ T5623] usbhid: probe of 5-1:0.0 failed with error -71 [ 1001.685489][ T5623] usb 5-1: USB disconnect, device number 14 [ 1001.919618][T15302] loop3: detected capacity change from 0 to 128 [ 1001.986671][T15302] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1002.044630][T15302] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.213616][ T5623] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1002.221869][ T28] audit: type=1107 audit(1764206780.022:2374): pid=15301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1002.336099][T15018] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1002.429164][ T5623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1002.474184][ T5623] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1002.509638][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.539037][ T5623] usb 5-1: config 0 descriptor?? [ 1002.985128][ T5623] usbhid 5-1:0.0: can't add hid device: -71 [ 1003.006258][ T5623] usbhid: probe of 5-1:0.0 failed with error -71 [ 1003.019281][ T5623] usb 5-1: USB disconnect, device number 15 [ 1003.796328][T15333] loop3: detected capacity change from 0 to 16 [ 1004.257927][T15333] erofs: (device loop3): mounted with root inode @ nid 36. [ 1005.598707][T15343] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1006.438473][T15355] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1006.966379][T15367] loop4: detected capacity change from 0 to 2048 [ 1009.930116][T15407] loop2: detected capacity change from 0 to 128 [ 1010.083174][T11555] kworker/u4:13: attempt to access beyond end of device [ 1010.083174][T11555] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1011.646973][T15418] loop3: detected capacity change from 0 to 131072 [ 1011.908873][T15418] F2FS-fs (loop3): invalid crc value [ 1011.941927][T15418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1012.017249][T15418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1014.237583][T15440] loop2: detected capacity change from 0 to 128 [ 1014.540693][ T49] kworker/u4:3: attempt to access beyond end of device [ 1014.540693][ T49] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1014.555066][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1014.992908][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1015.059262][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.224749][ T8] usb 5-1: config 0 descriptor?? [ 1015.409868][ T8] cp210x 5-1:0.0: cp210x converter detected [ 1016.004550][ T8] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1016.164889][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1016.358795][ T8] usb 5-1: USB disconnect, device number 16 [ 1016.382480][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1016.430184][ T8] cp210x 5-1:0.0: device disconnected [ 1016.802721][T15467] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1017.729405][T15475] loop2: detected capacity change from 0 to 128 [ 1018.814232][T15470] loop4: detected capacity change from 0 to 131072 [ 1018.836480][T15470] F2FS-fs (loop4): invalid crc value [ 1018.867638][T15470] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1018.916991][T15470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1023.084352][T12730] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1023.370000][T12730] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1023.434032][T12730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.455239][T12730] usb 5-1: config 0 descriptor?? [ 1023.476349][T12730] cp210x 5-1:0.0: cp210x converter detected [ 1024.121710][T12730] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1024.185485][T12730] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1024.375106][T12730] usb 5-1: USB disconnect, device number 17 [ 1024.422872][T12730] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1024.634727][T12730] cp210x 5-1:0.0: device disconnected [ 1024.907732][T15528] loop2: detected capacity change from 0 to 131072 [ 1024.925520][T15528] F2FS-fs (loop2): invalid crc value [ 1025.460605][T15528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1025.514451][T15528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1026.098766][T15548] UBIFS error (pid: 15548): cannot open "./file0", error -22 [ 1027.072309][T15554] loop4: detected capacity change from 0 to 16 [ 1027.644694][T15554] erofs: (device loop4): mounted with root inode @ nid 36. [ 1027.663741][T15553] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1027.673172][T15553] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1029.869556][T15572] fuse: Bad value for 'fd' [ 1032.876814][T15585] loop4: detected capacity change from 0 to 131072 [ 1032.962901][T15585] F2FS-fs (loop4): invalid crc value [ 1033.162538][T15585] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1033.232606][T15585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1033.574097][ T5867] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1033.774226][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 1033.786397][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.808182][ T5867] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1034.195942][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.215340][ T5867] usb 3-1: config 0 descriptor?? [ 1034.575100][T15604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 1034.861830][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 1034.965405][ T5867] usbhid: probe of 3-1:0.0 failed with error -71 [ 1035.147641][ T5867] usb 3-1: USB disconnect, device number 39 [ 1035.594025][T15612] fuse: Bad value for 'fd' [ 1036.943410][T15623] befs: (nullb0): invalid magic header [ 1037.718629][T15628] loop2: detected capacity change from 0 to 1024 [ 1038.008906][T15628] hfsplus: can't free extent [ 1040.628499][T15658] fuse: Bad value for 'fd' [ 1042.097725][T15675] loop3: detected capacity change from 0 to 1024 [ 1042.279882][T15675] hfsplus: can't free extent [ 1042.425802][T15680] loop4: detected capacity change from 0 to 16 [ 1042.502344][T15680] erofs: (device loop4): mounted with root inode @ nid 36. [ 1043.598504][T15687] loop3: detected capacity change from 0 to 128 [ 1044.999579][T15687] syz.3.2603: attempt to access beyond end of device [ 1044.999579][T15687] loop3: rw=2049, sector=185, nr_sectors = 192 limit=128 [ 1045.411132][T11558] kworker/u4:14: attempt to access beyond end of device [ 1045.411132][T11558] loop3: rw=1, sector=145, nr_sectors = 40 limit=128 [ 1045.444438][T11558] kworker/u4:14: attempt to access beyond end of device [ 1045.444438][T11558] loop3: rw=1, sector=377, nr_sectors = 8 limit=128 [ 1047.109352][T15718] loop4: detected capacity change from 0 to 2048 [ 1049.531807][T15742] loop3: detected capacity change from 0 to 128 [ 1049.800087][T15742] syz.3.2616: attempt to access beyond end of device [ 1049.800087][T15742] loop3: rw=2049, sector=185, nr_sectors = 856 limit=128 [ 1050.333981][ C1] hrtimer: interrupt took 63181 ns [ 1050.486521][T11569] kworker/u4:18: attempt to access beyond end of device [ 1050.486521][T11569] loop3: rw=1, sector=145, nr_sectors = 40 limit=128 [ 1050.639333][T15756] loop2: detected capacity change from 0 to 2048 [ 1052.074301][T12725] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1052.495904][T12725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.507849][T12725] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1052.538607][T12725] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1052.548785][T12725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.622473][T12725] usb 3-1: Product: syz [ 1052.669018][T12725] usb 3-1: Manufacturer: syz [ 1052.677994][T12725] usb 3-1: SerialNumber: syz [ 1052.970297][T15769] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1053.765681][T15786] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1053.810546][T15786] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1053.893726][T15786] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1053.915567][T15786] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1053.948086][T15786] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1053.976718][T15786] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 1054.004509][T15786] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1054.031520][T15786] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1054.059829][T15786] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1054.082907][T15786] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1054.109795][T15786] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 1054.131740][T15786] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1054.153028][T15786] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1054.182997][T15786] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1054.206011][T15786] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1054.229008][T15786] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1054.250857][T15786] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1054.282637][T15786] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1054.305673][T15786] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1054.376773][T15786] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 1054.895397][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.905998][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.824317][T12725] cdc_ncm 3-1:1.0: bind() failure [ 1055.904150][T12725] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1055.921234][T12725] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1055.963658][T12725] usbtest: probe of 3-1:1.1 failed with error -71 [ 1055.992169][T12725] usb 3-1: USB disconnect, device number 40 [ 1056.560625][T15804] netlink: 2792 bytes leftover after parsing attributes in process `syz.0.2632'. [ 1056.737608][T15817] ip6erspan0: entered promiscuous mode [ 1057.234055][ T5623] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1057.454768][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.496270][ T5623] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1057.505486][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.522426][ T5623] usb 1-1: config 0 descriptor?? [ 1057.755246][ T5623] usbhid 1-1:0.0: can't add hid device: -71 [ 1057.774287][ T5623] usbhid: probe of 1-1:0.0 failed with error -71 [ 1057.793514][ T5623] usb 1-1: USB disconnect, device number 66 [ 1058.384404][ T5623] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1058.596339][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1058.628652][ T5623] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1058.650410][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.949523][ T5623] usb 1-1: config 0 descriptor?? [ 1059.232554][T15834] befs: (nullb0): invalid magic header [ 1060.504728][ T5623] usbhid 1-1:0.0: can't add hid device: -71 [ 1060.528090][ T5623] usbhid: probe of 1-1:0.0 failed with error -71 [ 1060.539147][ T5623] usb 1-1: USB disconnect, device number 67 [ 1060.713899][T15849] UBIFS error (pid: 15849): cannot open "./file0", error -22 [ 1062.109894][T15861] netlink: 2792 bytes leftover after parsing attributes in process `syz.4.2645'. [ 1062.505930][T15863] ip6erspan0: entered promiscuous mode [ 1063.025308][T15873] befs: (nullb0): invalid magic header [ 1065.698840][T15890] loop4: detected capacity change from 0 to 16 [ 1065.788594][T15890] erofs: (device loop4): mounted with root inode @ nid 36. [ 1065.801501][T15888] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1065.810316][T15888] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1066.795333][T15792] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1067.022227][T15792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.052535][T15792] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1067.078589][T15792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.117178][T15792] usb 5-1: config 0 descriptor?? [ 1068.091796][T15792] usbhid 5-1:0.0: can't add hid device: -71 [ 1068.167624][T15792] usbhid: probe of 5-1:0.0 failed with error -71 [ 1068.186974][T15792] usb 5-1: USB disconnect, device number 18 [ 1068.290773][T15909] loop2: detected capacity change from 0 to 1024 [ 1069.224405][T15909] hfsplus: can't free extent [ 1070.324459][T15927] loop3: detected capacity change from 0 to 16 [ 1070.629201][T15927] erofs: (device loop3): mounted with root inode @ nid 36. [ 1070.639432][T15927] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1070.648163][T15927] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1074.035313][T15954] loop3: detected capacity change from 0 to 1024 [ 1074.740864][T15954] hfsplus: can't free extent [ 1076.571222][T15970] loop3: detected capacity change from 0 to 16 [ 1076.684218][T15970] erofs: (device loop3): mounted with root inode @ nid 36. [ 1076.698046][T15970] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1076.706868][T15970] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1080.184846][T15992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2683'. [ 1082.709768][T10316] Bluetooth: hci1: command 0x0406 tx timeout [ 1083.011831][T16023] loop3: detected capacity change from 0 to 1024 [ 1083.133221][T16023] hfsplus: can't free extent [ 1086.119829][T16036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1087.106426][T16049] loop3: detected capacity change from 0 to 16 [ 1087.644524][T16049] erofs: (device loop3): mounted with root inode @ nid 36. [ 1087.661137][T16047] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1087.669895][T16047] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1087.944606][T16053] fuse: Unknown parameter '/dev/cpu/#/msr' [ 1091.053196][T16070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2705'. [ 1091.192884][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2708'. [ 1091.264886][T16081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.272259][T16081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.292191][T16081] bridge0: entered allmulticast mode [ 1091.743341][T16090] loop2: detected capacity change from 0 to 16 [ 1091.927151][T16090] erofs: (device loop2): mounted with root inode @ nid 36. [ 1091.936166][T16090] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1091.944848][T16090] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1094.480937][T16104] fuse: Bad value for 'group_id' [ 1094.524272][T12728] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1094.924013][T12728] usb 4-1: device descriptor read/64, error -71 [ 1095.721577][T12728] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1095.914321][T12728] usb 4-1: device descriptor read/64, error -71 [ 1096.035401][T12728] usb usb4-port1: attempt power cycle [ 1096.964048][T12728] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1097.648884][T12728] usb 4-1: device not accepting address 35, error -71 [ 1097.810733][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 1097.861514][T16120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.870788][T16120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.049707][T16120] bridge0: entered allmulticast mode [ 1098.069214][T14352] Bluetooth: hci2: command 0x0406 tx timeout [ 1099.948747][T16142] loop4: detected capacity change from 0 to 16 [ 1100.235340][T16142] erofs: (device loop4): mounted with root inode @ nid 36. [ 1100.332935][T16142] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1100.341947][T16142] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1100.353210][T12728] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1100.674038][T12728] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1100.683630][T12728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.749036][T12728] usb 4-1: config 0 descriptor?? [ 1100.790935][T12728] cp210x 4-1:0.0: cp210x converter detected [ 1100.835694][T16149] fuse: Bad value for 'group_id' [ 1100.841994][T12738] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1101.155168][T12738] usb 3-1: device descriptor read/64, error -71 [ 1101.198143][T12728] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1101.246020][T12728] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1101.384896][ T28] audit: type=1326 audit(1764206879.202:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.0.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ec98f749 code=0x7ffc0000 [ 1101.434514][ T8] usb 4-1: USB disconnect, device number 37 [ 1101.463665][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1101.499522][ T8] cp210x 4-1:0.0: device disconnected [ 1101.534178][T12738] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1101.585316][ T28] audit: type=1326 audit(1764206879.202:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.0.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ec98f749 code=0x7ffc0000 [ 1101.641317][ T28] audit: type=1326 audit(1764206879.202:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.0.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f20ec98f749 code=0x7ffc0000 [ 1101.664571][ T28] audit: type=1326 audit(1764206879.202:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16153 comm="syz.0.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20ec98f749 code=0x7ffc0000 [ 1101.687016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.704305][T12738] usb 3-1: device descriptor read/64, error -71 [ 1101.824429][T12738] usb usb3-port1: attempt power cycle [ 1102.302589][T12738] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1102.344325][T16165] ip6erspan0: entered promiscuous mode [ 1102.354145][T12738] usb 3-1: device descriptor read/8, error -71 [ 1102.664352][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1102.672024][T12738] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1102.743253][T12738] usb 3-1: device descriptor read/8, error -71 [ 1102.904258][T12738] usb usb3-port1: unable to enumerate USB device [ 1102.925285][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.955238][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1102.997024][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.006579][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.033687][ T8] usb 5-1: Product: syz [ 1103.044069][ T8] usb 5-1: Manufacturer: syz [ 1103.049211][ T8] usb 5-1: SerialNumber: syz [ 1103.464487][T16167] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1104.683840][ T8] cdc_ncm 5-1:1.0: bind() failure [ 1104.737126][ T8] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 1104.762660][ T8] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1104.785012][ T8] usbtest: probe of 5-1:1.1 failed with error -71 [ 1104.813113][ T8] usb 5-1: USB disconnect, device number 19 [ 1105.134181][T16175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2736'. [ 1105.529441][T16181] fuse: Bad value for 'group_id' [ 1106.541927][T16190] loop2: detected capacity change from 0 to 1024 [ 1106.707736][T16190] hfsplus: can't free extent [ 1107.868816][ T5623] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1108.174116][ T5623] usb 5-1: device descriptor read/64, error -71 [ 1108.474471][ T5623] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1108.674052][ T5623] usb 5-1: device descriptor read/64, error -71 [ 1108.795402][ T5623] usb usb5-port1: attempt power cycle [ 1109.053700][T16214] befs: (nullb0): invalid magic header [ 1109.354546][ T5623] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1109.952106][ T5623] usb 5-1: device descriptor read/8, error -71 [ 1111.144104][ T5623] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1111.394074][ T5623] usb 5-1: device not accepting address 23, error -71 [ 1111.402218][ T5623] usb usb5-port1: unable to enumerate USB device [ 1115.571363][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 1116.315398][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.321744][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.739738][T16270] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1119.747862][T16295] netlink: 2792 bytes leftover after parsing attributes in process `syz.2.2768'. [ 1125.650202][T16331] netlink: 2792 bytes leftover after parsing attributes in process `syz.2.2779'. [ 1131.851684][T16380] netlink: 2792 bytes leftover after parsing attributes in process `syz.3.2789'. [ 1134.320369][T16391] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1134.806614][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2792'. [ 1134.854124][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 1134.864456][T16392] netlink: 'syz.3.2792': attribute type 20 has an invalid length. [ 1142.703149][T16429] loop3: detected capacity change from 0 to 1024 [ 1142.850181][T16428] hfsplus: can't free extent [ 1143.613609][T16443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2809'. [ 1145.507271][T16462] fuse: Unknown parameter 'grou00000000000000000000' [ 1149.936113][T16495] fuse: Unknown parameter 'grou00000000000000000000' [ 1152.134395][ T5867] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1152.324848][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 1152.346144][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1152.370612][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1152.403267][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1152.429649][ T5867] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1153.295351][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.303443][ T5867] usb 5-1: Product: syz [ 1153.307977][ T5867] usb 5-1: Manufacturer: syz [ 1153.323981][ T5867] usb 5-1: SerialNumber: syz [ 1153.331984][ T5867] usb 5-1: config 0 descriptor?? [ 1154.974471][T16528] fuse: Unknown parameter 'grou00000000000000000000' [ 1155.208182][ T5623] usb 5-1: USB disconnect, device number 24 [ 1161.163699][T16568] fuse: Unknown parameter 'group_i00000000000000000000' [ 1163.084077][T12730] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1163.374305][T12730] usb 1-1: Using ep0 maxpacket: 16 [ 1163.386925][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.400765][T12730] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1163.410675][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.424967][T12730] usb 1-1: config 0 descriptor?? [ 1163.919481][T12730] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1163.931029][T12730] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1163.946137][T12730] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1163.972660][T12730] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1164.006364][T12730] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 1164.112729][T12730] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1164.157531][ C1] usb 1-1: input irq status -75 received [ 1164.643656][ T5867] usb 1-1: USB disconnect, device number 68 [ 1165.114479][T16597] fuse: Unknown parameter 'group_i00000000000000000000' [ 1168.711072][T16626] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1169.455327][T16636] fuse: Bad value for 'fd' [ 1170.793503][T16642] befs: (nullb0): invalid magic header [ 1170.913437][T16644] loop2: detected capacity change from 0 to 256 [ 1171.019925][T10999] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1172.848265][T16656] loop3: detected capacity change from 0 to 512 [ 1172.869822][T16656] EXT4-fs: Ignoring removed oldalloc option [ 1172.926664][T16656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1173.224340][T16656] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1173.239329][T16656] EXT4-fs (loop3): 1 truncate cleaned up [ 1173.260624][T16656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.824076][ T5867] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1174.014362][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 1174.029755][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1174.093790][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1174.209185][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1174.539814][ T5867] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1174.553721][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.564382][ T5867] usb 1-1: Product: syz [ 1174.568693][ T5867] usb 1-1: Manufacturer: syz [ 1174.573417][ T5867] usb 1-1: SerialNumber: syz [ 1174.585891][ T5867] usb 1-1: config 0 descriptor?? [ 1174.813754][T12730] usb 1-1: USB disconnect, device number 69 [ 1175.819155][ T5867] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1175.845539][T15018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.409239][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.561066][ T5867] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1177.167124][ T5867] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1177.184250][T16678] fuse: Unknown parameter 'group_id00000000000000000000' [ 1177.267068][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.474922][ T5867] usb 3-1: Product: syz [ 1177.479230][ T5867] usb 3-1: Manufacturer: syz [ 1177.490027][ T5867] usb 3-1: SerialNumber: syz [ 1177.719197][ T5867] cdc_ncm 3-1:1.0: bind() failure [ 1177.731530][ T5867] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1177.758951][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.765536][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.771418][ T5867] cdc_ncm 3-1:1.1: bind() failure [ 1177.806960][ T5867] usb 3-1: USB disconnect, device number 45 [ 1178.497926][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 1178.660683][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 1181.485122][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1181.504995][T16695] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1181.947446][T16706] loop3: detected capacity change from 0 to 16 [ 1181.957994][T16706] erofs: (device loop3): mounted with root inode @ nid 36. [ 1181.968172][T16706] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1181.976898][T16706] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1183.604320][T16712] fuse: Unknown parameter 'group_id00000000000000000000' [ 1184.485139][T16723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2888'. [ 1187.083301][T16754] fuse: Bad value for 'fd' [ 1187.790092][T16759] fuse: Unknown parameter 'group_id00000000000000000000' [ 1188.643975][T16766] 9pnet_fd: Insufficient options for proto=fd [ 1189.110795][T16768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1189.492483][T16776] loop2: detected capacity change from 0 to 1024 [ 1189.597514][T16776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.837870][ T28] audit: type=1800 audit(1764206967.652:2379): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2901" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1190.738588][T16776] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.2901: Allocating blocks 385-513 which overlap fs metadata [ 1190.858841][T16776] EXT4-fs (loop2): pa ffff888078a3eae0: logic 16, phys. 129, len 24 [ 1190.868140][T16776] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 1191.885503][T14350] Trying to write to read-only block-device loop2 [ 1191.914523][T14350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.046150][T16798] fuse: Bad value for 'user_id' [ 1195.559217][T12728] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1196.446333][T12728] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1196.464849][T12728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.493749][T12728] usb 3-1: config 0 descriptor?? [ 1196.539742][T12728] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1199.392310][T12728] gspca_cpia1: usb_control_msg 03, error -110 [ 1199.396110][T16844] fuse: Bad value for 'user_id' [ 1199.408255][T12728] gspca_cpia1: usb_control_msg 01, error -32 [ 1199.714344][T12728] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1200.400921][T16848] netlink: 'syz.3.2919': attribute type 4 has an invalid length. [ 1200.685868][T15792] usb 3-1: USB disconnect, device number 46 [ 1204.116716][T16881] fuse: Bad value for 'user_id' [ 1204.948526][T16888] loop2: detected capacity change from 0 to 8 [ 1205.745683][ T5623] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1206.164761][ T5623] usb 1-1: Using ep0 maxpacket: 16 [ 1206.273859][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.307763][ T5623] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1206.344244][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.407079][ T5623] usb 1-1: config 0 descriptor?? [ 1206.876489][T16899] netlink: 2792 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1207.548149][ T5623] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1207.791415][T12728] usb 1-1: USB disconnect, device number 70 [ 1209.582445][T16915] fuse: Bad value for 'fd' [ 1210.714313][T15792] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1211.054050][T15792] usb 1-1: Using ep0 maxpacket: 8 [ 1211.243475][T15792] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1211.252076][T15792] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1211.262033][T15792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1211.276491][T15792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1211.287493][T15792] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.314682][T15792] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1211.334051][T15792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.602293][T15792] usb 1-1: usb_control_msg returned -32 [ 1211.609571][T15792] usbtmc 1-1:16.0: can't read capabilities [ 1211.624033][T15792] usb 1-1: USB disconnect, device number 71 [ 1211.740070][T16939] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1214.090198][T16952] fuse: Bad value for 'fd' [ 1214.553043][T16956] loop3: detected capacity change from 0 to 512 [ 1214.709106][T16956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.722275][T16956] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1215.816985][T16956] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.2953: corrupted inode contents [ 1215.836720][T16956] EXT4-fs error (device loop3): ext4_dirty_inode:6120: inode #2: comm syz.3.2953: mark_inode_dirty error [ 1215.853695][T16956] EXT4-fs error (device loop3): ext4_do_update_inode:5244: inode #2: comm syz.3.2953: corrupted inode contents [ 1215.870608][T16956] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.2953: mark_inode_dirty error [ 1216.055095][T15018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.504240][ T5867] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1217.864108][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 1217.950258][ T5867] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1217.961931][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1217.973253][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1217.983974][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1217.994578][ T5867] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1218.791451][ T5867] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1218.801003][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.177186][ T5867] usb 1-1: usb_control_msg returned -32 [ 1219.218281][ T5867] usbtmc 1-1:16.0: can't read capabilities [ 1220.173097][ T5867] usb 1-1: USB disconnect, device number 72 [ 1221.161916][T16996] fuse: Bad value for 'fd' [ 1222.567339][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 1223.065150][T15792] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1223.951469][T15792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.963459][T15792] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1224.104717][ T5623] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1224.126544][T15792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1224.135921][T15792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.145323][T15792] usb 4-1: Product: syz [ 1224.149537][T15792] usb 4-1: Manufacturer: syz [ 1224.154543][T15792] usb 4-1: SerialNumber: syz [ 1224.756395][T17022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1224.915803][ T5623] usb 1-1: Using ep0 maxpacket: 8 [ 1224.926222][ T5623] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1225.126946][ T5623] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1225.127932][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 1225.163823][ T5623] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1225.174091][T17039] netlink: 'syz.4.2975': attribute type 5 has an invalid length. [ 1225.185623][T17039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2975'. [ 1225.260878][T17039] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1225.269760][T17039] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1225.278693][T17039] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1225.287621][T17039] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1225.297450][T17039] geneve2: entered promiscuous mode [ 1225.302814][T17039] geneve2: entered allmulticast mode [ 1225.648667][ T5623] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1225.671221][ T5623] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.696509][ T5623] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1225.814587][T15792] cdc_ncm 4-1:1.0: bind() failure [ 1225.849226][T15792] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1225.854264][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.856941][T15792] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1225.896173][T15792] usbtest: probe of 4-1:1.1 failed with error -71 [ 1225.936686][T15792] usb 4-1: USB disconnect, device number 38 [ 1225.980057][T17044] loop2: detected capacity change from 0 to 16 [ 1226.059277][T11007] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1226.096170][ T5623] usb 1-1: usb_control_msg returned -71 [ 1226.146024][ T5623] usbtmc 1-1:16.0: can't read capabilities [ 1226.207169][ T5623] usb 1-1: USB disconnect, device number 73 [ 1230.684393][ T5623] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1231.083344][ T5623] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.190535][ T5623] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1231.355951][ T5623] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.365578][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.373642][ T5623] usb 1-1: Product: syz [ 1231.404273][ T5623] usb 1-1: Manufacturer: syz [ 1231.410921][ T5623] usb 1-1: SerialNumber: syz [ 1231.708598][T17087] loop2: detected capacity change from 0 to 8 [ 1232.349091][T17074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1232.362720][T14356] udevd[14356]: symlink '../../loop2' '/dev/disk/by-diskseq/355.tmp-b7:2' failed: Read-only file system [ 1232.429214][T11007] udevd[11007]: symlink '../../loop2' '/dev/disk/by-diskseq/355.tmp-b7:2' failed: Read-only file system [ 1232.803014][T11007] udevd[11007]: symlink '../../loop2' '/dev/disk/by-diskseq/355.tmp-b7:2' failed: Read-only file system [ 1233.183531][T11007] udevd[11007]: symlink '../../loop2' '/dev/disk/by-diskseq/356.tmp-b7:2' failed: Read-only file system [ 1233.216538][ T5623] cdc_ncm 1-1:1.0: bind() failure [ 1233.237473][ T5623] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1233.253842][ T5623] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1233.262917][ T5623] usbtest: probe of 1-1:1.1 failed with error -71 [ 1233.284583][ T5623] usb 1-1: USB disconnect, device number 74 [ 1233.309080][T17099] loop2: detected capacity change from 0 to 1024 [ 1233.548150][T10999] udevd[10999]: symlink '../../loop2' '/dev/disk/by-diskseq/357.tmp-b7:2' failed: Read-only file system [ 1233.585987][T10999] udevd[10999]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1233.640376][T10999] udevd[10999]: symlink '../../loop2' '/dev/disk/by-diskseq/357.tmp-b7:2' failed: Read-only file system [ 1233.664198][T10999] udevd[10999]: symlink '../../loop2' '/dev/disk/by-diskseq/357.tmp-b7:2' failed: Read-only file system [ 1233.686551][T10999] udevd[10999]: symlink '../../loop2' '/dev/disk/by-diskseq/357.tmp-b7:2' failed: Read-only file system [ 1233.777935][T10999] udevd[10999]: symlink '../../loop2' '/dev/disk/by-diskseq/358.tmp-b7:2' failed: Read-only file system [ 1234.204110][T12730] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1234.747609][T12730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.763475][T12730] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1234.791622][T12730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.820201][T12730] usb 1-1: config 0 descriptor?? [ 1235.244892][T17123] loop4: detected capacity change from 0 to 8 [ 1235.337534][T17123] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1235.346990][T17123] SQUASHFS error: Failed to read block 0x82: -5 [ 1235.353394][T17123] SQUASHFS error: Unable to read metadata cache entry [80] [ 1235.360789][T17123] SQUASHFS error: Unable to read inode 0x11f [ 1235.974301][T12730] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 1236.118644][T12730] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input81 [ 1236.324286][T17129] loop4: detected capacity change from 0 to 1024 [ 1236.540560][T17129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.583048][T12730] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1236.665283][T12730] usb 1-1: USB disconnect, device number 75 [ 1236.725694][ T28] audit: type=1800 audit(1764207014.532:2380): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3005" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1236.740373][T17134] fido_id[17134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1236.817900][T17129] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.3005: Allocating blocks 385-513 which overlap fs metadata [ 1236.851319][T17128] EXT4-fs (loop4): pa ffff888076df3828: logic 16, phys. 129, len 24 [ 1236.860067][T17128] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 1237.159487][ T9890] Trying to write to read-only block-device loop4 [ 1237.182742][ T9890] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.980495][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/361.tmp-b7:4' failed: Read-only file system [ 1238.045668][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/361.tmp-b7:4' failed: Read-only file system [ 1238.177322][T17145] loop4: detected capacity change from 0 to 128 [ 1238.318880][T11007] udevd[11007]: symlink '../../loop2' '/dev/disk/by-diskseq/358.tmp-b7:2' failed: Read-only file system [ 1238.335357][T10999] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1238.423691][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/363.tmp-b7:4' failed: Read-only file system [ 1238.489135][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/363.tmp-b7:4' failed: Read-only file system [ 1238.536394][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/363.tmp-b7:4' failed: Read-only file system [ 1238.580419][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/363.tmp-b7:4' failed: Read-only file system [ 1239.191013][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.197976][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.317217][T17164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1240.449532][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/364.tmp-b7:4' failed: Read-only file system [ 1241.654636][T17179] fuse: Bad value for 'fd' [ 1243.133840][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/364.tmp-b7:4' failed: Read-only file system [ 1243.913034][T17197] loop4: detected capacity change from 0 to 8 [ 1244.254068][T10999] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1244.496055][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/365.tmp-b7:4' failed: Read-only file system [ 1244.578104][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/365.tmp-b7:4' failed: Read-only file system [ 1244.651411][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/365.tmp-b7:4' failed: Read-only file system [ 1244.928564][T17209] fuse: Bad value for 'fd' [ 1244.940516][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/365.tmp-b7:4' failed: Read-only file system [ 1245.787912][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/366.tmp-b7:4' failed: Read-only file system [ 1246.917498][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/366.tmp-b7:4' failed: Read-only file system [ 1246.994487][T17226] fuse: Bad value for 'rootmode' [ 1247.982627][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/366.tmp-b7:4' failed: Read-only file system [ 1248.043532][T17237] netlink: 'syz.4.3036': attribute type 4 has an invalid length. [ 1248.845292][T10999] udevd[10999]: symlink '../../loop4' '/dev/disk/by-diskseq/366.tmp-b7:4' failed: Read-only file system [ 1250.353344][T17259] fuse: Bad value for 'rootmode' [ 1256.748575][T17293] fuse: Bad value for 'rootmode' [ 1262.068817][T17344] fuse: Unknown parameter 'use00000000000000000000' [ 1267.259240][T17382] fuse: Unknown parameter 'use00000000000000000000' [ 1270.294626][T17406] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.597581][T17406] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.856940][T17406] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.799544][T17406] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.073548][T17406] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.127764][T17406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.165946][T17406] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.228550][T17406] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.349469][T17423] fuse: Unknown parameter 'use00000000000000000000' [ 1272.459433][T17428] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1275.442229][T17456] fuse: Unknown parameter '0000000000000000000400000000000000000000004' [ 1275.633307][T17459] fuse: Unknown parameter 'user_i00000000000000000000' [ 1275.889054][T17468] 9pnet_fd: Insufficient options for proto=fd [ 1277.441349][T17489] fuse: Unknown parameter 'user_i00000000000000000000' [ 1278.071602][T17493] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3110'. [ 1280.286930][T17516] fuse: Unknown parameter 'user_i00000000000000000000' [ 1282.329582][T17543] fuse: Unknown parameter 'user_id00000000000000000000' [ 1285.594737][T17581] fuse: Unknown parameter 'user_id00000000000000000000' [ 1286.005600][T17593] fuse: Bad value for 'fd' [ 1286.228660][T17599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3143'. [ 1286.384965][T17604] overlay: ./file0 is not a directory [ 1287.490693][T17613] fuse: Unknown parameter 'user_id00000000000000000000' [ 1287.643989][T17622] fuse: Bad value for 'fd' [ 1287.767854][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1288.136782][T17633] netlink: 'syz.4.3154': attribute type 12 has an invalid length. [ 1289.696183][T17649] fuse: Bad value for 'fd' [ 1289.752935][T17654] fuse: Bad value for 'fd' [ 1290.240155][T17666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3167'. [ 1293.662745][T17691] fuse: Bad value for 'fd' [ 1293.992578][T17698] 9pnet_fd: Insufficient options for proto=fd [ 1295.694293][T17721] fuse: Bad value for 'fd' [ 1296.099507][T17714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3181'. [ 1296.113743][T17730] 9pnet_fd: Insufficient options for proto=fd [ 1300.654459][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.660818][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.705598][T17759] fuse: Unknown parameter '00000000000000000004' [ 1300.914393][T17763] 9pnet_fd: Insufficient options for proto=fd [ 1301.812581][T17765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3195'. [ 1302.553978][T17787] fuse: Unknown parameter '00000000000000000004' [ 1302.803425][T17796] 9pnet_fd: Insufficient options for proto=fd [ 1304.147005][T17802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3207'. [ 1304.712070][T17823] fuse: Unknown parameter '00000000000000000004' [ 1307.672226][T17847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3219'. [ 1308.242487][T17864] fuse: Unknown parameter '00000000000000000004' [ 1309.761963][T17889] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 1309.784224][T17889] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 1310.305965][T17898] fuse: Unknown parameter '00000000000000000004' [ 1310.786426][T17893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3231'. [ 1313.350710][T17932] fuse: Unknown parameter '00000000000000000004' [ 1313.773282][T17939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1314.084355][T17945] 9pnet_fd: Insufficient options for proto=fd [ 1315.418263][T17965] fuse: Unknown parameter 'fd00000000000000000004' [ 1316.309377][T17980] 9pnet_fd: Insufficient options for proto=fd [ 1316.361189][T17978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3256'. [ 1318.966914][T18014] 9pnet_fd: Insufficient options for proto=fd [ 1319.346698][T11579] wlan1: Trigger new scan to find an IBSS to join [ 1319.397106][ T49] ------------[ cut here ]------------ [ 1319.403050][ T49] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 1319.414402][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 1319.424355][ T49] Modules linked in: [ 1319.428275][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1319.435686][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.445781][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 1319.452070][ T49] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 1319.458353][ T49] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 ae be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 7b 0c 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 1319.477984][ T49] RSP: 0000:ffffc90000ba7380 EFLAGS: 00010246 [ 1319.484076][ T49] RAX: b819b79b98069e00 RBX: 000000000000000c RCX: ffff88801b6d1e00 [ 1319.492055][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1319.500060][ T49] RBP: 0000000000000084 R08: ffffc90000ba6f87 R09: 1ffff92000174df0 [ 1319.508075][ T49] R10: dffffc0000000000 R11: fffff52000174df1 R12: 0000000000000020 [ 1319.516084][ T49] R13: dffffc0000000000 R14: ffff8880249e3358 R15: ffff88802facf8e8 [ 1319.524102][ T49] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1319.533047][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1319.539674][ T49] CR2: 00007fdd795d82d8 CR3: 0000000061c48000 CR4: 00000000003506f0 [ 1319.547680][ T49] Call Trace: [ 1319.550981][ T49] [ 1319.553978][ T49] rate_control_send_low+0x194/0x790 [ 1319.559280][ T49] rate_control_get_rate+0x20b/0x5c0 [ 1319.564600][ T49] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 1319.570296][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 1319.576362][ T49] ? __lock_acquire+0x1260/0x7c80 [ 1319.581439][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 1319.587625][ T49] invoke_tx_handlers_late+0xb6/0x1810 [ 1319.593110][ T49] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 1319.598955][ T49] ieee80211_tx+0x2ad/0x420 [ 1319.603465][ T49] ? ieee80211_skb_resize+0x630/0x630 [ 1319.608875][ T49] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 1319.614393][ T49] ? __bpf_trace_tasklet+0x140/0x140 [ 1319.619818][ T49] ? ieee80211_xmit+0x310/0x3f0 [ 1319.624749][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 1319.630767][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 1319.636607][ T49] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 1319.642944][ T49] ieee80211_scan_state_send_probe+0x560/0x930 [ 1319.649153][ T49] ieee80211_scan_work+0x4e8/0x1c30 [ 1319.654408][ T49] cfg80211_wiphy_work+0x225/0x260 [ 1319.659535][ T49] ? process_scheduled_works+0x957/0x15b0 [ 1319.665291][ T49] process_scheduled_works+0xa45/0x15b0 [ 1319.670864][ T49] ? assign_work+0x400/0x400 [ 1319.675488][ T49] ? assign_work+0x39e/0x400 [ 1319.680116][ T49] worker_thread+0xa55/0xfc0 [ 1319.684777][ T49] kthread+0x2fa/0x390 [ 1319.688848][ T49] ? pr_cont_work+0x560/0x560 [ 1319.693534][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1319.698150][ T49] ret_from_fork+0x48/0x80 [ 1319.702575][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1319.707190][ T49] ret_from_fork_asm+0x11/0x20 [ 1319.711971][ T49] [ 1319.715015][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1319.722290][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1319.729663][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.739732][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 1319.745991][ T49] Call Trace: [ 1319.749277][ T49] [ 1319.752217][ T49] dump_stack_lvl+0x16c/0x230 [ 1319.756898][ T49] ? show_regs_print_info+0x20/0x20 [ 1319.762096][ T49] ? load_image+0x3b0/0x3b0 [ 1319.766632][ T49] panic+0x2c0/0x710 [ 1319.770535][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 1319.775048][ T49] ? ret_from_fork_asm+0x11/0x20 [ 1319.779997][ T49] __warn+0x2e0/0x470 [ 1319.783975][ T49] ? __rate_control_send_low+0x635/0x880 [ 1319.789607][ T49] ? __rate_control_send_low+0x635/0x880 [ 1319.795236][ T49] report_bug+0x2be/0x4f0 [ 1319.799595][ T49] ? __rate_control_send_low+0x635/0x880 [ 1319.805227][ T49] ? __rate_control_send_low+0x635/0x880 [ 1319.810879][ T49] ? __rate_control_send_low+0x637/0x880 [ 1319.816526][ T49] handle_bug+0xcf/0x120 [ 1319.820791][ T49] exc_invalid_op+0x1a/0x50 [ 1319.825301][ T49] asm_exc_invalid_op+0x1a/0x20 [ 1319.830161][ T49] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 1319.836423][ T49] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 ae be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 7b 0c 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 1319.856028][ T49] RSP: 0000:ffffc90000ba7380 EFLAGS: 00010246 [ 1319.862125][ T49] RAX: b819b79b98069e00 RBX: 000000000000000c RCX: ffff88801b6d1e00 [ 1319.870096][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1319.878063][ T49] RBP: 0000000000000084 R08: ffffc90000ba6f87 R09: 1ffff92000174df0 [ 1319.886041][ T49] R10: dffffc0000000000 R11: fffff52000174df1 R12: 0000000000000020 [ 1319.894013][ T49] R13: dffffc0000000000 R14: ffff8880249e3358 R15: ffff88802facf8e8 [ 1319.902014][ T49] rate_control_send_low+0x194/0x790 [ 1319.907307][ T49] rate_control_get_rate+0x20b/0x5c0 [ 1319.912592][ T49] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 1319.918246][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 1319.924226][ T49] ? __lock_acquire+0x1260/0x7c80 [ 1319.929277][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 1319.935375][ T49] invoke_tx_handlers_late+0xb6/0x1810 [ 1319.940859][ T49] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 1319.946678][ T49] ieee80211_tx+0x2ad/0x420 [ 1319.951183][ T49] ? ieee80211_skb_resize+0x630/0x630 [ 1319.956575][ T49] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 1319.962074][ T49] ? __bpf_trace_tasklet+0x140/0x140 [ 1319.967390][ T49] ? ieee80211_xmit+0x310/0x3f0 [ 1319.972261][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 1319.978246][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 1319.984071][ T49] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 1319.990399][ T49] ieee80211_scan_state_send_probe+0x560/0x930 [ 1319.996573][ T49] ieee80211_scan_work+0x4e8/0x1c30 [ 1320.001808][ T49] cfg80211_wiphy_work+0x225/0x260 [ 1320.006926][ T49] ? process_scheduled_works+0x957/0x15b0 [ 1320.012648][ T49] process_scheduled_works+0xa45/0x15b0 [ 1320.018218][ T49] ? assign_work+0x400/0x400 [ 1320.022819][ T49] ? assign_work+0x39e/0x400 [ 1320.027415][ T49] worker_thread+0xa55/0xfc0 [ 1320.032057][ T49] kthread+0x2fa/0x390 [ 1320.036171][ T49] ? pr_cont_work+0x560/0x560 [ 1320.040851][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1320.045441][ T49] ret_from_fork+0x48/0x80 [ 1320.049863][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1320.054450][ T49] ret_from_fork_asm+0x11/0x20 [ 1320.059227][ T49] [ 1320.062586][ T49] Kernel Offset: disabled [ 1320.067135][ T49] Rebooting in 86400 seconds..